I'm all on-board that Value is recently pushing for two-factor authentication on Steam accounts. I'm not happy that they force you to use the Steam mobile app because both on iOS and Android, it's a piece of trash. Plus, I already use Google authenticator for my other two-factor needs.

Does anyone know if Steam uses a rolling code algorithm compatible with standard rolling code generation software? With the right information, can I use GA for Steam? Or is it simply a timed code issued only to some unique ID associated with a mobile app installation linked to your account?

  • 2
    I'm not sure that we can answer this. Even if we did, Valve could change it without announcement as it's a proprietary tool. Jan 6, 2016 at 4:29
  • Well that sounds like an answer. I didn't know it was proprietary. Do you have a source stating their two-factor auth API is proprietary? Generally an API isn't proprietary and the DMCA protects me if I want to write something that inter-operates with one. I guess no one has done any independent research? Jan 6, 2016 at 5:27
  • It is proprietary by the fact that they don't use something like GA. Perhaps it's been researched but I doubt anyone here will know. Perhaps someone will answer. You never know. Jan 6, 2016 at 5:32
  • I'm being pedantic, but that's not really a thorough definition of proprietary. You never know, maybe someone will (= Jan 6, 2016 at 5:33
  • 2
    Perhaps 'trade secret' would be better? Jan 6, 2016 at 5:37


Browse other questions tagged .